Privacy Policy

1. Introduction

Current is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services.

2. Information We Collect

Account Information

• Phone number (required for account creation and verification)
• Display name and profile photo (optional)
• Date of birth and sex/gender (collected at signup to personalize your experience)
• Email address (for Partner accounts only)
• Password (stored securely as a cryptographic hash — never in plain text)

Usage Data

• Events you create, attend, or interact with
• Circles and contacts you organize
• Venues and businesses you follow or like
• App usage patterns and preferences

User-Generated Content

• Event details, descriptions, and cover images you create
• Photos you upload to your profile, events, or venues
• Checklist items and poll responses within events
• Messages sent within event group chats

Device Information

• Device type and operating system
• Push notification tokens
• Precise location — latitude and longitude (with your permission, used to show nearby events and venues)
• Places you visit — only if you turn on “Remember places I go” (off by default). Your phone notices when you spend time at a venue listed on Current and records which venue, when, and for how long. Your location itself is never sent to us or stored: the matching happens on your phone, and only the venue visit is kept. Visits are private to you, are never shown to other people, and can be turned off at any time in Privacy Controls or your device’s location settings.

3. How We Use Your Information

• Create and manage your account
• Enable event creation and RSVP functionality
• Connect you with friends and contacts
• Send event invitations and updates via push notifications
• Show relevant public events based on your location
• Ask how a place was after you visit it, and improve your own suggestions from your visits and ratings
• Improve our services and user experience
• Prevent fraud and ensure platform safety

4. Contact Discovery

To help you find friends on Current, we allow you to sync your device contacts. When you choose to sync contacts, phone numbers are hashed (converted to a secure, irreversible format) before being sent to our servers. We never store raw phone numbers of your contacts—only hashed values used for matching.

When you invite someone to an event who is not yet a Current user, their phone number (as provided by you, the inviting user) may be used to send them an SMS invitation on your behalf. We do not scrape or independently collect non-user phone numbers — they are provided solely by the inviting user from their own contacts.

5. SMS Communications

We use Twilio to send SMS messages in the following circumstances:

• Verification codes: Sent to your phone number during account creation and login
• Event invitations to non-users: When a Current user invites you to an event and you do not have a Current account, we may send a one-time SMS on the inviting user's behalf

Non-users who receive an invitation SMS can reply STOP to opt out of future messages, or contact us at [email protected] to request removal. Message and data rates may apply.

6. Information Sharing

We do not sell your personal information. We may share information in these cases:

• With other users: Your profile and RSVPs are visible to event hosts and attendees
• With venues: When you follow a business, they can see your public profile
• Service providers: Firebase, Twilio, and analytics services
• Legal requirements: When required by law

7. Third-Party Services

• Firebase (Google): Authentication, database, storage, and notifications
• Twilio: SMS verification and event invitation messages
• Google Places: Venue search and location
• Stripe: Payment processing (Partner accounts)

8. Automated Processing

Current uses automated systems in the following limited ways:

• Wave invitations: When an event host uses wave-based invitations, our system automatically manages invitation timing and capacity — sending the next wave when spots are available based on prior responses
• Location-based recommendations: Events and venues are surfaced based on your geographic proximity

We do not engage in profiling or make automated decisions that produce legal effects or similarly significant effects on you.

9. Cookies and Web Technologies

Our web portal (partner dashboard and related pages) may use:

• Cookies and local storage: For session management and keeping you signed in
• Firebase Analytics: To understand usage patterns and improve our services

We do not use third-party advertising cookies or tracking pixels. You can manage cookie preferences through your browser settings.

10. Data Storage and Transfers

Your data is stored on Google Cloud (Firebase) infrastructure located in the United States. If you are accessing Current from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States. By using Current, you consent to the transfer of your data to the United States.

11. Data Retention

We retain your account information as long as your account is active. If you delete your account, we will remove your personal information within 30 days, except where retention is required by law.

• Account data and profile information are deleted within 30 days of account deletion
• SMS rate-limit and verification data expires automatically after a short period
• Aggregated, de-identified analytics data may be retained indefinitely
• Event data you created may persist in anonymized form for other attendees

12. Data Security

We implement industry-standard security measures including encrypted data transmission (HTTPS/TLS), secure cloud infrastructure, access controls, and regular security reviews.

13. Your Rights

• Access your personal data through the App
• Update or correct your profile information
• Delete your account and associated data
• Opt out of marketing communications
• Disable location services or contact sync at any time via your device settings
• Withdraw consent for precise location access at any time (the app will still function with reduced location features)
• Opt out of SMS invitations by replying STOP or contacting us
• Request a copy of your data

14. California Privacy Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to know: You may request information about the categories and specific pieces of personal information we have collected about you
• Right to delete: You may request that we delete the personal information we have collected about you
• Right to opt out of sale: We do not sell your personal information to third parties
• Non-discrimination: We will not discriminate against you for exercising your CCPA rights

To exercise your California privacy rights, please contact us at [email protected]. We will verify your identity before processing your request.

15. Do Not Track

Some browsers send a "Do Not Track" (DNT) signal. There is currently no industry standard for how companies should respond to DNT signals. At this time, Current does not respond to DNT signals. We do not track users across third-party websites, and we do not use third-party advertising trackers.

16. Children's Privacy

Current is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13.

17. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the State of Washington, United States, without regard to its conflict of law provisions.

18. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes through the App or via push notification.

19. Contact Us

If you have questions about this Privacy Policy, please contact us at [email protected]